Vulnerabilities

TI-2022-06469 CVE-2022-22125 · GHSA-3g85-r6x7-j7mx

Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Tag

LOW 24

In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article tag.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00856 Published 2022-01-13 No fix listed CWE-79

TI-2022-06468 CVE-2022-22124 · GHSA-g7vj-x88g-9f9w

LOW 26

In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00731 Published 2022-01-13 No fix listed CWE-79

TI-2022-06467 CVE-2022-22123 · GHSA-66cp-6j7w-r93f

LOW 26

In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article title.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00731 Published 2022-01-13 No fix listed CWE-79